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Amendments to the Claims: 

What is claimed is: 

1 . (Currently Amended) A digital signature scheme based on braid group conjugacy 
problem, parameters involved in this scheme comprising a signatory (S), a signature verifying 
party {V}, a message £M} needing signature, an integer n for a numb e r of generators in th e 
braid group, an integer m for the number of g e nerators in a left subgroup, an int e g e r / for a 
upper bound of a length of a braid, a braid group 5„ (l) - divided into a left subgroup 
LBjjj (/) of [l ) , and a right subgroup i?^„_/_„,(/) of B^{l) , an integer n for a nimiber of 
generators in the braid group B„ (/ ) . an integer m for a number of generators in a left 
subgroup L^,„ (/) , an integer / for an upper bound of a length of a braid, a one way hash 
function h from bit sequence {O,l}*_to braid groups B^{l); said signature scheme comprising 
the following steps of: 

Step l.a signatory (S) selecting three braids x e LB„, (/), x' e B„ (l\a e bJi) a braid x 
generated from die left subgroup LB„, (l ) , a second braid x ' generated from the braid group 
B„ (/ ) , and a third braid a generated from the braid group 5„ (/ ) , and making them meet 

x' = fl~'xa , moreover, with known x and x', it being impossible to find a in calculation, and 
considering a_braid pair_(x',x) as a public key of signatory (S), braid a as a private key of 
signatory (S); 

Step 2. signatory (S) using hash function h for message (M) needing signature to get 
y = h{M) from the braid group - e- 5„ (/ ) ; 

Step 3. generating a braid from the right subgroup RB^^ , „,(0^^ random, then 
signing the message (M) with the ewn-private key a and a generated random braid b to obtain 
Sign (m) = a~^byb~^a ; and 

Step 4. the signatory (S) outputting message (M) and a signature of message (M) 
Sign(M). 
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2. (Previously Presented) The digital signature scheme based on braid group conjugacy 
problem according to claim 1, wherein generating the public key braid pair (x'.x) and the 
private key braid a of signatory (S) in said step 1 comprises the following steps of: 

Step la. selecting a distance d between system parameter braid groups public key 

pairs; 

Step lb. representing x into a left canonical form x = t^'n^n^ ...n,; 
Step Ic. selecting a braid b at random to belong to a set 5„ (5 /) 
Step Id. calculating x' = b'^xb, a = b; 

Step le. generating a bit at random, if 1, calculating x' = decycling{x'), a = an,; if not 
1, calculating x' = cycUng{x'\ a = flr"(;T/); 

Step If. judging whether x' belongs to SSS(x) and whether l(x') < d, if all the 
conditions are yes, outputting the braid paiifx, x') as the public key, a as the private key; if 
either of them is not, performing step le. 

3. (Original) The digital signature scheme based on braid group conjugacy problem 
according to claim 1, wherein the process for obtaining = h{M)e 5„(/)by using the hash 
function h in said step 2 comprises the following steps of: 

Step 2a, selecting an ordinary hash function H, with a length of output H(M) is / 
[log(2,n!)] , then dividing H(M) into / sections -^i||-^2||- ■ |-^/ i° ^o^OLdiX at one time; 

Step 2b, corresponding Ri to a pennutation braid Ai, then calculating 
h(M)=Al*A2...Al, that is the h(M) required. 

4. (Previously Presented) The digital signature scheme based on braid group conjugacy 
problem according to claim 1 , wherein a integer n for the number of generators in a braid 
group is in the range of 20-28, an upper value of the braid length is 1=3, d=4, and an left 
subgroup n-m=4. 

5. -7. (Canceled) 

8. (Currently Amended) A digital signature scheme based on braid groups conjugacy 
problem and verifying method thereof, parameters involved in this method comprising a 
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signatory £S}, a signature verifying party £V}, a message {M} needing signature, an integer n 
for th e numb e r of gen e rators in th e braid group, an integer m for the number of g e n e rators in 
th e left subgroup, an integer / for the upper bound of the length of a braid -a braid 
Rroup bJi) - , divided into a left subgroup LB„,{l)i : and a right subgroup RB^ an integer 

n for a number of generators in the braid group 5„ (/) , an integer m for a number of 
generators in the left subgroup (/ ) , an integer / for an upper bound of a length of a braid, 
a one way hash fiinction h mapped ft'om bit sequence {0,1}* to braid groups B„ (/) ; 
comprising the following steps of 

Step 1 . the signatory(S) selecting three braids x e LB,„ (/ ), x' e B^^ (l ), a e B,^ (/) a braid x 
generated from the left subgroup LB„^ (/ ) , a second braid x ' generated from the braid group 
^„(/) . and a third braid a generated from the braid group -5„(/), and making them meet 

x' = a~^xa, moreover, with the known x and x', it is impossible to find a in calculation, and 
considering a braid pair_(x',x) as a public key of the signatory (5), a braid a as a private key of 
signatory (5); 

Step 2. signatory (S) using a hash fimction h for message (M) needing signature to get 
y = h{M) from the braid group (/) ; 

Step 3. generating a braid from the right subgroup RB,^ , „,{0^^ random, then 
signing the message (M) with the private key a and the braid b generated randomly to obtain 
Sign{M) = a~^byb~^a; 

Step 4. the signatory (S) outputting the message (M) and its signature Sign(M) to the 
signature verifying party (V); 

Step 5. the signature verifying party (V) obtaining the public key of signatory (S) after 
receiving the message (M) and the signature of message (M) Sign (M) transmitted from 
signatory (S); 

Step 6. calculating message Mby employing a system parameter hash function h, to 
ohXam y=h(M)\ 

Step 7. judging whether sign(M) and y are conjugate or not, if not, sign(M) is an 
illegal signature, the verification fails; if yes, perform step 8; and 
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Step 8. calculating sign(M) x' and xy by using the obtained public key of signatory 
(S), and judging whether they are conjugate or not, if not, sign(M) is an illegal signature, and 
the verification fails; if yes, sign(M) is a legal signature of message (M). 

9. (Original) The digital signature scheme based on braid group conjugacy problem and 
verifying method thereof according to claim 8, wherein generating the pubhc key braid pair 
{x'.x) and private key braid a of signatory (S) in said step 1 comprises the following steps of: 

Step la. selecting a distance J between system parameter braid groups public key 

pair; 

Step lb. representing x into left canonial form x = A";r,;r2 . . . ;r/ ; 
Step Ic. selecting a braid b at random to belong to set J5„ (5 /) 

Step Id. calculating x = b^^xb, a = b; 

Step le. generating a bit at random, if 1, calculating x' = decyclmg{x'), a = aTT/ ; if not 
1, calculating x' = cycling{x'), a = aT"{n,); and 

Step If judging whether x' belongs to SSS(x) and whether l(x')< J, if all conditions 
are yes, outputting the braid pairfx, x') as the public key, a as the private key; if either of them 
is not, performing step le. 

10. (Original) The digital signature scheme based on braid group conjugacy problem and 
verifying method thereof according to claim 8, wherein the process for obtaining 

using hash function h in said step 2 comprises the following steps of: 
Step 2a. selecting an ordinary hash function H, with a length of its output H(M) is / 

[log(2, n!)J, then dividing H(M) into / sections in equal at one time; and 

Step 2b. corresponding Ri to a permutation braid Ai, then calculating 

h(M)=Al*A2...Al, that is the h(M) required. 

1 1 . (Previously Presented) The digital signature scheme based on braid group conjugacy 
problem and verifying method thereof according to claim 8, wherein n for the number of the 
generation braids in the braid group is in the range of 20~ 28, an upper value of the braid 
length is 1=3, d=4, and an left subgroup n-m=4. 
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12. (Original) The digital signature scheme based on braid group conjugacy problem and a 

verifying method thereof according to claim 8, wherein algorithm BCD A is employed in 
judging whether sign(M) and y are conjugate or not in step 7 and judging whether sign(M) x' 
and xy are conjugate or not in step 8. 

13. (Previously Presented) The digital signature scheme based on braid group conjugacy 
problem according to claim 2, wherein a integer n for the number of generators in a braid 
group is in the range of 20~28, an upper value of the braid length is 1=3. d=4, and an left 
subgroup n-m=4. 

14. (Previously Presented) The digital signature scheme based on braid group conjugacy 
problem according to claim 3, wherein a integer n for the number of generators in a braid 
group is in the range of 20-28, an upper value of the braid length is 1=3, d=4, and an left 

subgroup n-m=4. 

15. (Previously Presented) The digital signature scheme based on braid group conjugacy 
problem and verifying method thereof according to claim 9, wherein n for the number of the 
generation braids in the braid group is in the range of 20-28, an upper value of the braid 
length is 1=3, d=4, and an left subgroup n-m=4. 

16. (Previously Presented) The digital signature scheme based on braid group conjugacy 
problem and verifying method thereof according to claim 10, wherein n for the number of the 
generation braids ui the braid group is in the range of 20~28, an upper value of the braid 
length is 1=3, d=4, and an left subgroup n-m=4. 
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